Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
File: F1EkoXuHIV95IFzRSG9hg5z55vg.mft (raw, json)
Hash identifier: 2+nQZGuYg1DJw8YdDaYh04AU9rHIH8JGVgNKUp5f1p4=
Subject key identifier: 65:AB:B7:5D:5A:2A:0D:4F:D0:07:76:2D:B1:1D:CC:6D:30:76:7C:BE
Authority key identifier: 17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
Certificate issuer: /CN=175124a17b87215f79205cd1486f61839cf9e6f8
Certificate serial: 0194BC3CA45D79F34B4D71A1D3F44EF22863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
Manifest number: 1037
Signing time: Fri 31 Jan 2025 12:01:18 +0000
Manifest this update: Fri 31 Jan 2025 12:01:18 +0000
Manifest next update: Sat 01 Feb 2025 12:01:18 +0000
Files and hashes: 1: DMobrwEvAlt4_akaIi-0Lc6dPts.roa (hash: eRMFGBbat7fpcfp5RVndmvhD7W3VWXwnUQLezxfywoU=)
2: F1EkoXuHIV95IFzRSG9hg5z55vg.crl (hash: +rYOMB1GpIhgAF9rTDK7II5ors42yd+LKdpqfSDu618=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a4:5d:79:f3:4b:4d:71:a1:d3:f4:4e:f2:28:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=175124a17b87215f79205cd1486f61839cf9e6f8
Validity
Not Before: Jan 31 12:01:18 2025 GMT
Not After : Feb 1 12:01:18 2025 GMT
Subject: CN=65abb75d5a2a0d4fd007762db11dcc6d30767cbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:8a:aa:ea:a0:b6:e5:bb:e8:70:32:27:57:
bc:a8:31:53:32:5c:c0:03:b6:34:56:47:31:cf:5c:
7e:a9:1f:76:3b:1e:06:17:9f:a8:fa:60:f6:c6:a2:
95:2c:e0:b5:5d:a0:7c:e7:58:25:32:58:a0:e2:43:
ed:48:40:0b:1c:f6:d7:13:0e:50:85:7b:bf:05:15:
03:ab:98:ca:f2:bf:28:5b:9c:db:41:54:a9:ee:2c:
02:76:34:35:44:f0:9e:c0:bb:ec:b8:5e:dd:60:4c:
36:f8:d3:25:9c:9c:dc:cd:fc:63:9b:7c:f0:cd:fa:
60:17:02:9d:bd:f9:ee:25:66:65:bf:4f:15:7c:73:
87:19:63:c5:90:d1:bc:76:ac:40:44:f9:24:da:26:
43:9d:94:f3:62:0a:86:38:7b:cc:fd:90:5a:6b:5a:
76:c2:ed:ab:31:c4:d6:84:3e:40:52:65:19:70:5b:
e4:77:27:ac:6c:90:aa:cc:3c:eb:0e:a0:d5:7e:44:
29:86:03:6b:b9:8b:0d:1e:3e:60:cd:f1:1a:df:20:
23:03:b8:c7:50:db:38:e6:01:08:bd:4a:0c:65:a6:
aa:9d:4f:7c:1d:cc:2d:16:76:df:f4:d7:89:fa:d0:
52:91:d8:87:8e:06:67:e7:9d:9d:23:08:23:36:4e:
88:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:AB:B7:5D:5A:2A:0D:4F:D0:07:76:2D:B1:1D:CC:6D:30:76:7C:BE
X509v3 Authority Key Identifier:
keyid:17:51:24:A1:7B:87:21:5F:79:20:5C:D1:48:6F:61:83:9C:F9:E6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1EkoXuHIV95IFzRSG9hg5z55vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0d4aff-42db-427d-ad5e-c637b0dcdc8e/1/F1EkoXuHIV95IFzRSG9hg5z55vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b3:cf:fd:10:2a:9a:64:dd:24:a8:02:05:2d:d1:5d:ee:27:
f3:d9:58:a4:19:82:72:a7:31:91:67:57:b4:d8:a5:4e:00:e5:
59:d1:67:87:0e:01:5b:87:a2:23:ce:f7:94:ab:60:e9:a8:c3:
70:72:64:7b:24:da:49:8f:a1:5d:8a:f0:37:8b:be:08:21:7d:
fd:d1:30:55:99:c4:75:a9:18:d8:a1:2b:c0:f1:f1:f4:64:ea:
99:4e:c9:54:26:6f:ea:51:94:b3:81:cb:bd:03:6b:c3:f7:f4:
83:75:d8:3b:e6:76:e4:23:6f:44:f5:60:d5:3c:ef:39:04:ef:
54:ae:36:41:f6:52:a4:bd:7c:91:6a:57:73:e4:a2:17:5a:ed:
4e:57:39:09:17:39:39:0b:da:02:ed:16:a2:0f:b0:d9:5d:fc:
88:9c:54:47:04:ea:9f:64:95:44:35:88:c8:9d:d8:59:f7:01:
76:04:4f:f0:01:8b:bb:19:04:a7:e9:97:a2:22:80:f6:71:38:
ee:f5:e4:02:6b:b8:f4:73:39:4e:91:ab:a4:3a:95:ba:48:c2:
42:82:14:7a:f1:b4:32:a5:b1:88:e8:3f:cf:4e:25:d9:bc:ac:
f9:0f:f0:37:f8:7b:45:18:51:61:ac:de:c5:22:7c:b1:33:31:
a7:c9:28:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PKRdefNLTXGh0/RO8ihjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NTEyNGExN2I4NzIxNWY3OTIwNWNkMTQ4NmY2MTgzOWNm
OWU2ZjgwHhcNMjUwMTMxMTIwMTE4WhcNMjUwMjAxMTIwMTE4WjAzMTEwLwYDVQQD
Eyg2NWFiYjc1ZDVhMmEwZDRmZDAwNzc2MmRiMTFkY2M2ZDMwNzY3Y2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RCKquqgtuW76HAyJ1e8qDFTMlzA
A7Y0Vkcxz1x+qR92Ox4GF5+o+mD2xqKVLOC1XaB851glMlig4kPtSEALHPbXEw5Q
hXu/BRUDq5jK8r8oW5zbQVSp7iwCdjQ1RPCewLvsuF7dYEw2+NMlnJzczfxjm3zw
zfpgFwKdvfnuJWZlv08VfHOHGWPFkNG8dqxARPkk2iZDnZTzYgqGOHvM/ZBaa1p2
wu2rMcTWhD5AUmUZcFvkdyesbJCqzDzrDqDVfkQphgNruYsNHj5gzfEa3yAjA7jH
UNs45gEIvUoMZaaqnU98HcwtFnbf9NeJ+tBSkdiHjgZn552dIwgjNk6IewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWrt11aKg1P0Ad2LbEdzG0wdny+MB8GA1UdIwQY
MBaAFBdRJKF7hyFfeSBc0UhvYYOc+eb4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFFa29YdUhJVjk1SUZ6UlNHOWhnNXo1NXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8wZDRhZmYtNDJkYi00MjdkLWFkNWUt
YzYzN2IwZGNkYzhlLzEvRjFFa29YdUhJVjk1SUZ6UlNHOWhnNXo1NXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8wZDRhZmYtNDJkYi00MjdkLWFkNWUtYzYzN2IwZGNkYzhl
LzEvRjFFa29YdUhJVjk1SUZ6UlNHOWhnNXo1NXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbPP/RAq
mmTdJKgCBS3RXe4n89lYpBmCcqcxkWdXtNilTgDlWdFnhw4BW4eiI873lKtg6ajD
cHJkeyTaSY+hXYrwN4u+CCF9/dEwVZnEdakY2KErwPHx9GTqmU7JVCZv6lGUs4HL
vQNrw/f0g3XYO+Z25CNvRPVg1TzvOQTvVK42QfZSpL18kWpXc+SiF1rtTlc5CRc5
OQvaAu0Wog+w2V38iJxURwTqn2SVRDWIyJ3YWfcBdgRP8AGLuxkEp+mXoiKA9nE4
7vXkAmu49HM5TpGrpDqVukjCQoIUevG0MqWxiOg/z04l2bys+Q/wN/h7RRhRYaze
xSJ8sTMxp8koAQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:10 2025 by rpki-client